Hello everyone,
After the last update to version 7.9.1 my ELK cluster and beats version in Kibana under Visuals tab, I start to receive such notifications. Easy google is nothing gave to me, so I am here.
And this is an error that we have. And this is become, only when we what to visualize something. So the problem mainly in the index.
The clipboard copy also here
{
"took": 1871,
"timed_out": false,
"_shards": {
"total": 22,
"successful": 21,
"skipped": 17,
"failed": 1,
"failures": [
{
"shard": 0,
"index": "filebeat-7.4.0",
"node": "0tI6xkQBTduwZttoQe_yhw",
"reason": {
"type": "illegal_argument_exception",
"reason": "Text fields are not optimised for operations that require per-document field data like aggregations and sorting, so these operations are disabled by default. Please use a keyword field instead. Alternatively, set fielddata=true on [host.hostname] in order to load field data by uninverting the inverted index. Note that this can use significant memory."
}
}
]
},
"hits": {
"total": 699812,
"max_score": null,
"hits": []
},
"aggregations": {
"2": {
"doc_count_error_upper_bound": 0,
"sum_other_doc_count": 0,
"buckets": [
{
"key": "xxx1",
"doc_count": 252556
},
{
"key": "elastic-node3",
"doc_count": 193383
},
{
"key": "xxx2",
"doc_count": 94929
},
{
"key": "xxx3",
"doc_count": 67915
},
{
"key": "elastic-node1.etk.ee",
"doc_count": 54645
},
{
"key": "elastic-node2.etk.ee",
"doc_count": 25827
},
{
"key": "xxx4",
"doc_count": 7998
},
{
"key": "xxx5",
"doc_count": 568
},
{
"key": "xxx6",
"doc_count": 522
},
{
"key": "xxx7",
"doc_count": 419
},
{
"key": "xxx8",
"doc_count": 395
},
{
"key": "xxx9",
"doc_count": 258
},
{
"key": "xxx10",
"doc_count": 222
},
{
"key": "xxx11",
"doc_count": 175
}
]
}
}
}
So, guys... Please help me!